Wardriving |
Wardriving is searching for Wi-Fi wireless networks by automobile. It involves using a car and a Wi-Fi-equipped computer, such as a laptop or a Personal_digital_assistant, to detect the networks. It is also known (as of 2002) as WiLDing (Wireless Lan Driving), originating in the San Francisco Bay Area with the Bay Area Wireless Users Group (BAWUG). It is similar to using a scanner for radio.
Many wardrivers use GPS devices to measure the location of the network find and log it on a website. For better range, Antenna (electronics)s are built or bought, and vary from omnidirectional to highly directional. computer software for wardriving is freely available on the Internet, notably, NetStumbler for Microsoft Windows, KisMac for Apple Macintosh, and Kismet (program) for Linux.
Wardriving was named after wardialing because it also involves searching for accessible computer systems.
The average wardriver is typically only out to log and collect information from the wireless access points (WAPs) they find while driving.
The legality of wardriving in the United States is not clearly defined. There has never been any conviction for wardriving, and there is the untested argument that the 802.11 and Dynamic_Host_Configuration_Protocol protocols operate on behalf of the owner giving consent to use the network, but not if the user has other reason to know that there is no consent. A New Hampshire bill which would clarify that the duty to secure the wireless network lies with the network owner did not pass yet, due to concerns that it may create a loophole for criminal activity. The specific laws, in any case, vary from state to state.
The law differs in other countries. For example, a wardriver in the United Kingdom might be caught with the use of a computer for a purpose for which one does not have permission clause. This is a commonly misunderstood concept. Wardrivers do not, in fact, usually use services without authorization and may not even transmit a signal at all.
=Ethical considerations=
Wardriving is frequently cited as an example of a questionable activity. However, from a technical viewpoint, everything is working as designed: Access points broadcast identifying data accessible to anyone with a suitable receiver by necessity.
In cases of listen-only software, such as Kismet (program), wardriving can be likened to listening to a radio station that happens to be broadcasting in your area. But again, this may differ in other countries. For example, in the UK it is illegal to listen on some radio frequencies or to some transmissions (such as those used by the police or armed forces).
With other types of software, such as NetStumbler, the wardriver sends probes, and the access point responds per design. Most access points, when using default settings, are intended to provide wireless access to all who request it. Some argue that those who set up access points without adding security measures are offering their connection, sometimes unintentionally, to the community. Others argue that this reasoning is akin to stating that people who leave their doors unlocked are asking people to take what they like. In fact, when people unfamiliar to wardriving see how many open access points there are and how easy it is to find them, they sometimes want to secure their own access points. Some wardrivers go to the extent of informing the access point s administrator about their insecurity and offer steps to correct it. However, it has largely become etiquette to leave access points open for others to use just as someone expects to find open access points while on the road. This freely sharing of bandwidth is also the basis of wireless community networks which are often considered the future of the internet.
=Wireless network security=
More security-conscious network operators may choose from a variety of security measures to limit access to their wireless network, including: *MAC address authentication in combination with discretionary Dynamic Host Configuration Protocol server settings allow a user to set up an allowed MAC address list. Under this type of security, the access point will only give an IP Address to computers whose MAC address is on the list. Thus, the network administrator would obtain the valid MAC addresses from each of the potential clients in their network. Disadvantages to this method include the additional setup. Methods to defeat this type of security include MAC address spoofing, detailed on the MAC address page, whereby network traffic is observed, valid MACs are collected, and then used to obtain DHCP leases. *IP security (IPsec) can be used to encrypt traffic between network nodes, reducing or eliminating the amount of plaintext information transmitted over the air. This security method addresses privacy concerns of wireless users, as it becomes much more difficult to observe their wireless activity. Difficulty of setting up IPsec is related to the brand of Access Point being used. Some access points may not offer IPsec at all, while others may require firmware updates before IPsec options are available. Methods to defeat this type of security are computationally intensive to the extent that they are infeasible using readily-available hardware, or they rely on Social engineering (computer security) to obtain information (keys, etc) about the IPsec installation. *Wired Equivalent Privacy (WEP) can be used on many Access Points without cumbersome setup, but offers little in the way of practical security. It is cryptologically very weak, so an access key can easily be stolen. Its use is often discouraged in favor of other more robust security measures, but many users feel that any security is better than none. In practice, this may simply mean your neighbors non-WEP networks are more accessible targets. WEP is sometimes known to slow down network traffic in the sense that the WEP implementation causes extra packets to be transmitted across the network. *Wi-Fi Protected Access (WPA) is more secure than WEP but is not yet very widespread. Many Access Points will support WPA after a firmware update. *VPN options such as tunnel-mode IPSec or [http://openvpn.sourceforge.net OpenVPN] can be the (respectively) most difficult to set up, but often provide the most flexible, extendable security, and as such are recommended for larger networks with many users. *Wireless intrusion detection systems can be used to detect the presence of rogue access points which expose a network to security breaches. Such systems are particularly of interest to large organizations with many employees.
=See also=
=External links=
*[http://www.wardriving.com/ wardriving.com] *[http://www.kismetwireless.net Kismet] *[http://www.macstumbler.com/ MacStumbler] Mac OS X Wireless detection utility. *[http://www.wardrive.net/ Wardrive.net] Site dedicated to 802.11 Security and Wardriving *[http://www.wifimaps.com/ WiFiMaps.com] Web-based global GIS database of wardriving data *[http://wigle.net/ WiGLE.net: World wide database and mapping of war drive data] *[http://www.worldwidewardrive.org/ World Wide War Drive] *[http://www.netstumbler.com/ NetStumbler] *[http://www.aspecto-software.com/WiFiFoFum WiFiFoFum] Pocket PC 2003 & Windows mobile 2005 wardriving utility *[http://www.xenon-inc.com/index.phpname=Downloads&d_op=viewdownload&cid=5/ WarDrive ToolBox] *[http://www.ethereal.com/ Ethereal] *[http://www.tomshardware.com/column/20040430/ Tom s Hardware Guide - Warflying] *[http://www.niquille.net/index/warboating niquille.net networking - warboating] *[http://ssrn.com/abstract=585867 War, Peace or Stalemate], An article on the ethics and legality of wardriving. *[http://charlotte.fbi.gov/dojpressrel/2004/lowescomputerhack.htm] ...believed to be the first conviction in the nation for wardriving,|
|